Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32322d3332203d3e20323633323932.roa
File: 34352e3136362e38342e302f32322d3332203d3e20323633323932.roa (raw, json)
Hash identifier: mhpWA7i7K4DAxvpwDxHoJ5cmUAgTvw/RkJUsh75q34o=
Subject key identifier: DC:7C:D8:52:C4:0A:56:AD:26:52:5D:D0:19:BD:F9:2B:65:F7:05:9D
Certificate issuer: /CN=F69AA99C56F931362559734CF519AD71790C2490
Certificate serial: 2424E680BA56F4D2EA75A8ABD3CBE017805F7F8E
Authority key identifier: F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer
Subject info access: rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32322d3332203d3e20323633323932.roa
Signing time: Tue 03 Sep 2024 23:20:33 +0000
ROA not before: Tue 03 Sep 2024 23:15:33 +0000
ROA not after: Tue 02 Sep 2025 23:20:33 +0000
asID: 263292
IP address blocks: 45.166.84.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:24:e6:80:ba:56:f4:d2:ea:75:a8:ab:d3:cb:e0:17:80:5f:7f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69AA99C56F931362559734CF519AD71790C2490
Validity
Not Before: Sep 3 23:15:33 2024 GMT
Not After : Sep 2 23:20:33 2025 GMT
Subject: CN=DC7CD852C40A56AD26525DD019BDF92B65F7059D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:32:c7:b6:bb:2e:24:48:eb:17:bc:41:29:
e6:71:ff:56:a6:0e:7f:17:e2:53:9e:a1:fe:a7:d6:
4f:ea:89:c0:72:27:de:7c:f8:3b:9e:e0:15:60:40:
aa:6a:6d:65:c2:f0:7a:1d:85:51:96:77:cc:50:90:
1e:1f:67:27:81:36:3b:03:25:fd:49:9f:e2:95:49:
cf:45:78:a8:70:3a:64:fb:fb:9d:9c:5f:b7:68:ae:
4c:a3:5d:b3:75:93:7f:be:96:0f:f2:50:53:c9:32:
7f:aa:18:c7:77:70:dd:06:12:e5:87:18:e1:17:7a:
4c:76:e5:e3:2a:67:ac:a7:12:bd:0d:99:20:73:c9:
31:64:69:b4:77:ed:82:87:b0:76:d4:fc:47:af:d6:
d9:7f:a9:4c:b6:74:9f:cf:ea:1b:93:5d:07:62:51:
87:e4:e2:ac:c5:c1:05:99:97:a8:c6:00:74:5b:cd:
4e:ac:37:55:a1:4a:f8:28:bc:27:5b:f1:14:69:29:
5d:20:0e:1e:74:e5:81:83:c1:0a:21:86:fd:b3:45:
eb:c4:59:79:f6:87:13:ad:1b:47:51:e2:20:31:a5:
a9:a5:7d:fe:5d:8c:79:9c:05:2b:b2:8b:1a:15:23:
fb:5b:b0:1d:ae:17:b7:72:6a:02:7d:56:8d:e6:f8:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:D8:52:C4:0A:56:AD:26:52:5D:D0:19:BD:F9:2B:65:F7:05:9D
X509v3 Authority Key Identifier:
keyid:F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38342e302f32322d3332203d3e20323633323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.84.0/22
Signature Algorithm: sha256WithRSAEncryption
32:f1:6f:76:b5:e4:2c:86:d1:54:c3:71:c5:ee:b9:17:d9:39:
50:ca:fc:9c:42:33:26:c0:0a:52:fa:23:a9:86:9b:c6:1b:5e:
b8:91:6e:d7:e4:ba:f5:ce:2d:35:a2:ed:ab:9e:ba:a0:68:23:
ba:12:83:a9:bc:61:c7:c7:24:78:1c:fe:0e:12:60:2f:59:44:
15:99:f7:ae:50:f5:0d:23:d8:4a:0b:78:cb:ef:93:68:d6:c5:
c1:c4:49:6f:b6:24:77:38:e2:ea:c1:e5:47:29:39:82:bd:38:
de:ae:06:b2:63:09:99:b1:62:5a:0c:e3:8f:2a:f2:85:ca:d5:
24:a8:79:19:d5:fc:9d:3f:82:51:36:1a:9a:33:0f:d8:54:d1:
1d:5e:23:22:4a:b0:4e:7f:93:72:f4:dc:8f:13:aa:2e:65:83:
70:7e:7f:78:3f:9e:d8:d6:e1:8d:1b:ae:71:2a:8d:c7:d1:8f:
5d:d2:e5:56:98:10:00:c8:e2:5b:44:c9:81:34:bc:be:c4:d3:
c4:f7:51:f3:08:aa:fb:dd:06:11:dc:28:88:03:60:29:82:21:
e5:43:04:69:18:c2:51:d1:d4:67:4a:39:e2:bb:84:20:05:1d:
66:7c:c7:13:40:62:c8:8c:a5:1e:b9:2d:1f:e4:bc:1c:b3:93:
5f:18:a5:5e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJCTmgLpW9NLqdair08vgF4Bff44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5QUE5OUM1NkY5MzEzNjI1NTk3MzRDRjUxOUFENzE3
OTBDMjQ5MDAeFw0yNDA5MDMyMzE1MzNaFw0yNTA5MDIyMzIwMzNaMDMxMTAvBgNV
BAMTKERDN0NEODUyQzQwQTU2QUQyNjUyNUREMDE5QkRGOTJCNjVGNzA1OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwzLHtrsuJEjrF7xBKeZx/1am
Dn8X4lOeof6n1k/qicByJ958+Due4BVgQKpqbWXC8HodhVGWd8xQkB4fZyeBNjsD
Jf1Jn+KVSc9FeKhwOmT7+52cX7dorkyjXbN1k3++lg/yUFPJMn+qGMd3cN0GEuWH
GOEXekx25eMqZ6ynEr0NmSBzyTFkabR37YKHsHbU/Eev1tl/qUy2dJ/P6huTXQdi
UYfk4qzFwQWZl6jGAHRbzU6sN1WhSvgovCdb8RRpKV0gDh505YGDwQohhv2zRevE
WXn2hxOtG0dR4iAxpamlff5djHmcBSuyixoVI/tbsB2uF7dyagJ9Vo3m+GrtAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU3HzYUsQKVq0mUl3QGb35K2X3BZ0wHwYDVR0j
BBgwFoAU9pqpnFb5MTYlWXNM9RmtcXkMJJAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9icWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendG
LzAvRjY5QUE5OUM1NkY5MzEzNjI1NTk3MzRDRjUxOUFENzE3OTBDMjQ5MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GNjlBQTk5QzU2RjkzMTM2MjU1
OTczNENGNTE5QUQ3MTc5MEMyNDkwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
cWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendGLzAvMzQz
NTJlMzEzNjM2MmUzODM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMzMzIz
OTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLaZUMA0GCSqGSIb3DQEBCwUAA4IBAQAy8W92teQshtFU
w3HF7rkX2TlQyvycQjMmwApS+iOphpvGG164kW7X5Lr1zi01ou2rnrqgaCO6EoOp
vGHHxyR4HP4OEmAvWUQVmfeuUPUNI9hKC3jL75No1sXBxElvtiR3OOLqweVHKTmC
vTjergayYwmZsWJaDOOPKvKFytUkqHkZ1fydP4JRNhqaMw/YVNEdXiMiSrBOf5Ny
9NyPE6ouZYNwfn94P57Y1uGNG65xKo3H0Y9d0uVWmBAAyOJbRMmBNLy+xNPE91Hz
CKr73QYR3CiIA2ApgiHlQwRpGMJR0dRnSjniu4QgBR1mfMcTQGLIjKUeuS0f5Lwc
s5NfGKVe
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:19 2025 by rpki-client